Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: IkBDVvEcgpGGg1Kmh01+uqHDAobUh97GHxlG37KtZFs=
Subject key identifier: 02:D6:A6:C4:4E:14:4B:44:B8:07:7C:30:10:CC:4F:B7:E0:6F:76:12
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019FA93DB2D5F4974B565995EFFBD4A95E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0E51
Signing time: Tue 28 Jul 2026 15:00:20 +0000
Manifest this update: Tue 28 Jul 2026 15:00:20 +0000
Manifest next update: Wed 29 Jul 2026 15:00:20 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: 7/ZHlQ6EhXmmci/yE+gR5CmfFn6ftpAOnWYkG8hmms0=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:b2:d5:f4:97:4b:56:59:95:ef:fb:d4:a9:5e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Jul 28 15:00:20 2026 GMT
Not After : Jul 29 15:00:20 2026 GMT
Subject: CN=02d6a6c44e144b44b8077c3010cc4fb7e06f7612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:34:2d:4a:ee:70:19:57:51:8c:38:78:4b:
89:bc:5b:23:2f:c9:fa:20:a8:e4:9e:79:26:89:b0:
93:60:80:f7:a0:be:03:1a:ef:e1:da:4e:7c:f8:1d:
d1:7e:22:41:f3:f2:e3:d8:b7:83:0b:05:b8:88:6c:
4a:dd:12:aa:8f:44:0f:39:46:02:6a:d6:3a:64:7f:
3c:0e:30:19:5e:50:04:7e:80:a0:44:41:df:d1:24:
3f:e1:84:a9:d1:a0:61:4b:76:d8:8d:6b:44:f3:c3:
f3:89:d2:b1:92:68:95:b0:25:a6:b5:0a:49:18:73:
76:5e:d6:3c:18:8f:bb:3b:c7:c0:22:ec:8a:aa:2f:
41:a1:00:f7:7a:c6:f7:96:7a:85:82:f2:22:71:03:
46:29:4c:06:e5:64:c2:71:8e:43:df:d4:88:1d:e7:
8c:06:ef:71:9a:66:6b:b1:f1:c9:6e:fa:e6:42:6f:
ac:c8:2e:40:29:69:7a:7a:2d:b6:e4:59:02:a0:fc:
6f:12:b1:48:4a:87:2a:22:9f:ec:ae:63:93:67:0e:
0c:62:4f:d5:4a:e2:f7:d6:62:96:55:7b:c5:06:0e:
31:4d:9e:3c:7d:1a:04:5c:46:5e:bc:38:8b:47:81:
3d:42:e5:0e:5c:3e:3c:c0:46:67:01:27:b2:1e:55:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:A6:C4:4E:14:4B:44:B8:07:7C:30:10:CC:4F:B7:E0:6F:76:12
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:dd:70:08:42:a8:2d:fa:d2:8e:57:f5:58:4e:48:53:7a:
5c:85:88:e7:08:3b:29:77:30:ee:7b:7c:97:61:0b:a1:5b:82:
8e:fa:5c:af:4a:39:05:b0:d6:c5:70:db:57:f9:e5:72:d4:ff:
2c:8d:0c:6f:78:e3:c0:4b:9c:d6:de:61:f4:2e:21:47:93:14:
60:00:d8:30:0b:a1:b3:7a:bb:48:6e:eb:fa:ea:b7:32:4e:a2:
1f:98:30:c4:09:bd:f5:19:66:3e:88:80:96:6b:58:ad:09:50:
9b:9f:a5:4f:a0:09:f9:1a:05:9f:8d:e7:da:bf:da:2a:54:7a:
7f:91:47:84:43:4c:68:a2:5e:34:a4:00:1c:76:83:37:b2:a8:
eb:70:af:99:48:15:19:d8:bd:d3:0d:86:4b:ab:2d:67:6a:49:
fd:24:d6:69:e9:a6:07:aa:9e:75:47:d1:a1:7a:9f:33:d9:cd:
da:51:04:94:3d:e6:99:ac:32:cc:40:3b:73:b2:be:7d:c5:fc:
f6:e5:97:48:b9:c6:4f:11:ac:dc:26:8f:4c:b0:8c:f5:52:57:
e0:8c:65:05:8d:39:c7:18:84:83:6e:a1:e7:b7:44:38:d7:f7:
00:e8:c7:76:da:37:8e:96:a6:24:b0:3d:22:cc:f0:6e:42:e8:
e7:33:cb:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPbLV9JdLVlmV7/vUqV4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTllMmVlOGJjZWE2ZDViOTE5YzRhMzNkMjZkOWJiZjk4
MmE4NDMwHhcNMjYwNzI4MTUwMDIwWhcNMjYwNzI5MTUwMDIwWjAzMTEwLwYDVQQD
EygwMmQ2YTZjNDRlMTQ0YjQ0YjgwNzdjMzAxMGNjNGZiN2UwNmY3NjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi40LUrucBlXUYw4eEuJvFsjL8n6
IKjknnkmibCTYID3oL4DGu/h2k58+B3RfiJB8/Lj2LeDCwW4iGxK3RKqj0QPOUYC
atY6ZH88DjAZXlAEfoCgREHf0SQ/4YSp0aBhS3bYjWtE88PzidKxkmiVsCWmtQpJ
GHN2XtY8GI+7O8fAIuyKqi9BoQD3esb3lnqFgvIicQNGKUwG5WTCcY5D39SIHeeM
Bu9xmmZrsfHJbvrmQm+syC5AKWl6ei225FkCoPxvErFISocqIp/srmOTZw4MYk/V
SuL31mKWVXvFBg4xTZ48fRoEXEZevDiLR4E9QuUOXD48wEZnASeyHlU3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALWpsROFEtEuAd8MBDMT7fgb3YSMB8GA1UdIwQY
MBaAFAmp4u6LzqbVuRnEoz0m2bv5gqhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQt
YTAxZWVhNjVmZDMzLzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQtYTAxZWVhNjVmZDMz
LzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljDdcAhC
qC360o5X9VhOSFN6XIWI5wg7KXcw7nt8l2ELoVuCjvpcr0o5BbDWxXDbV/nlctT/
LI0Mb3jjwEuc1t5h9C4hR5MUYADYMAuhs3q7SG7r+uq3Mk6iH5gwxAm99RlmPoiA
lmtYrQlQm5+lT6AJ+RoFn43n2r/aKlR6f5FHhENMaKJeNKQAHHaDN7Ko63CvmUgV
Gdi90w2GS6stZ2pJ/STWaemmB6qedUfRoXqfM9nN2lEElD3mmawyzEA7c7K+fcX8
9uWXSLnGTxGs3CaPTLCM9VJX4IxlBY05xxiEg26h57dEONf3AOjHdto3jpamJLA9
IszwbkLo5zPLMw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:35 2026 by rpki-client